This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cZhnMZJb6FUaUwka_m0Jct-jgH4.cer File: cZhnMZJb6FUaUwka_m0Jct-jgH4.cer (raw, json) Hash identifier: VKws3heEIukUeO7FaAHIjYDX8p6p9ROqJA5mOMxAYBw= Subject key identifier: 71:98:67:31:92:5B:E8:55:1A:53:09:1A:FE:6D:09:72:DF:A3:80:7E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7834DC9C79171183C72A546DE3BD9D58 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0f/9a10c3-212f-4c5e-97bb-e0d576a5450e/1/cZhnMZJb6FUaUwka_m0Jct-jgH4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0f/9a10c3-212f-4c5e-97bb-e0d576a5450e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:08 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 29192 IP: 195.85.222.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:dc:9c:79:17:11:83:c7:2a:54:6d:e3:bd:9d:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=71986731925be8551a53091afe6d0972dfa3807e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:7d:20:e4:45:93:7e:45:79:b0:44:f4:05:a4: 69:23:bb:e3:3e:8f:29:59:fc:4c:ad:a6:0b:f7:f6: d6:55:9b:f9:2a:e5:6c:cc:43:e8:2a:91:3f:ef:ad: 1a:47:86:28:30:b9:af:1f:da:02:cb:ca:07:65:67: 79:22:b1:5a:9f:2d:fc:47:a4:32:07:ac:b3:b6:41: c9:84:7a:05:89:c9:27:bb:6a:d8:50:19:03:96:4c: ed:52:20:71:5f:8f:4a:f2:80:1a:1f:8c:84:5c:2c: 2e:e3:d3:2e:c9:7b:ad:7d:bf:64:28:a3:b0:cf:d8: ef:28:8f:ef:a9:0c:81:c6:4c:08:c0:09:7b:0c:94: 46:d6:0d:ef:cc:34:0d:a9:09:53:11:38:49:95:98: ea:18:51:bc:62:cd:34:af:da:72:74:2d:ac:f6:2a: 07:0e:35:c3:03:f7:0a:26:c7:43:3e:bf:5e:9e:a7: b7:76:39:a5:64:21:96:5e:ae:22:67:bf:07:e5:9a: 87:9b:cd:b9:1b:c4:df:2f:c6:9f:71:7e:a2:11:a5: fc:b4:a9:17:84:dc:cd:cc:32:48:3a:a6:b5:02:73: e2:56:3b:a2:3e:07:b9:cb:4a:2a:f1:93:32:82:c5: 9e:32:46:0b:2d:ac:0b:2f:b3:95:11:ce:b7:ec:87: e1:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:98:67:31:92:5B:E8:55:1A:53:09:1A:FE:6D:09:72:DF:A3:80:7E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/9a10c3-212f-4c5e-97bb-e0d576a5450e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/9a10c3-212f-4c5e-97bb-e0d576a5450e/1/cZhnMZJb6FUaUwka_m0Jct-jgH4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.85.222.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 29192 Signature Algorithm: sha256WithRSAEncryption ae:d0:73:e7:10:e1:ea:31:8a:e0:2b:a8:af:93:4f:d5:98:56: 57:c8:f6:00:27:53:98:12:92:13:4c:a7:3e:33:1f:2b:4a:d0: 6b:03:15:3d:bf:a2:b8:02:3b:81:62:1e:46:e6:6e:55:f6:39: 97:8e:41:1c:52:16:6e:8c:d7:25:e8:d1:f4:58:69:5c:64:b6: fc:4b:5e:05:41:b2:ce:e0:90:c0:4e:4a:39:d4:0e:90:c9:e2: 18:b7:bd:8d:4a:17:eb:35:41:a1:bb:45:cd:92:a1:56:e3:98: 1f:e9:b1:ec:96:a4:b2:2d:f8:b1:6c:96:3c:62:a2:25:01:bf: af:53:3a:90:6f:27:15:63:b0:c1:9f:ed:04:9d:38:1b:ee:00: e8:21:0e:f6:c4:1c:21:7b:b4:d4:9d:7c:43:17:d8:37:0b:2b: 91:a3:c5:3d:0d:a2:a0:b7:b9:ec:d3:0e:b3:d4:f7:2b:e4:b8: e5:25:f8:3c:57:31:7d:a9:61:4b:8e:61:2f:4d:8a:40:56:e7: 3c:c5:87:96:78:43:4a:e0:db:5f:10:ca:96:c9:e0:7f:ba:3c: f7:20:86:45:05:d6:4c:7e:f1:5d:b0:0d:bf:fe:c7:49:62:e4: 58:83:d4:63:f2:1b:0b:2b:87:ec:ca:6e:cd:5f:bc:05:f6:4c: 65:dc:20:02 -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgISAZt4NNyceRcRg8cqVG3jvZ1YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MTk4NjczMTkyNWJlODU1MWE1MzA5MWFmZTZkMDk3MmRmYTM4MDdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq30g5EWTfkV5sET0BaRpI7vjPo8p WfxMraYL9/bWVZv5KuVszEPoKpE/760aR4YoMLmvH9oCy8oHZWd5IrFany38R6Qy B6yztkHJhHoFicknu2rYUBkDlkztUiBxX49K8oAaH4yEXCwu49MuyXutfb9kKKOw z9jvKI/vqQyBxkwIwAl7DJRG1g3vzDQNqQlTEThJlZjqGFG8Ys00r9pydC2s9ioH DjXDA/cKJsdDPr9enqe3djmlZCGWXq4iZ78H5ZqHm825G8TfL8afcX6iEaX8tKkX hNzNzDJIOqa1AnPiVjuiPge5y0oq8ZMygsWeMkYLLawLL7OVEc637IfhGQIDAQAB o4ICnzCCApswHQYDVR0OBBYEFHGYZzGSW+hVGlMJGv5tCXLfo4B+MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBmLzlhMTBj My0yMTJmLTRjNWUtOTdiYi1lMGQ1NzZhNTQ1MGUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGYvOWExMGMz LTIxMmYtNGM1ZS05N2JiLWUwZDU3NmE1NDUwZS8xL2NaaG5NWkpiNkZVYVV3a2Ff bTBKY3QtamdINC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAw1XeMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQC AnIIMA0GCSqGSIb3DQEBCwUAA4IBAQCu0HPnEOHqMYrgK6ivk0/VmFZXyPYAJ1OY EpITTKc+Mx8rStBrAxU9v6K4AjuBYh5G5m5V9jmXjkEcUhZujNcl6NH0WGlcZLb8 S14FQbLO4JDATko51A6QyeIYt72NShfrNUGhu0XNkqFW45gf6bHslqSyLfixbJY8 YqIlAb+vUzqQbycVY7DBn+0EnTgb7gDoIQ72xBwhe7TUnXxDF9g3CyuRo8U9DaKg t7ns0w6z1Pcr5LjlJfg8VzF9qWFLjmEvTYpAVuc8xYeWeENK4NtfEMqWyeB/ujz3 IIZFBdZMfvFdsA2//sdJYuRYg9Rj8hsLK4fsym7NX7wF9kxl3CAC -----END CERTIFICATE-----Generated at Mon Feb 9 15:08:53 2026 by rpki-client